Privacy policy

What's kept on the phone

Transactions, accounts, budgets, bills, goals, debts, assets, settings and (if you budget as a couple) the key shared with your partner's phone are kept in the app's database on your phone. This data is gone when the app is uninstalled or when you use Start over in Account.

If Google backup is on, Android may include this app data in your Google account's backup. That backup is kept by Google for your account, encrypted when the phone has a screen lock, and can't be read by WLLT-e.

Notifications

Only notifications from the apps linked to your accounts are read. From each transaction notification, only the amount, the shop or recipient, and the time are taken. The notification's text isn't kept or sent. You can withdraw this access at any time in your phone's settings.

Screenshots, receipts and files

All of them are read on the phone with Google's ML Kit text recognition. Receipt photos aren't kept. For screenshots, WLLT-e only keeps the image's location on the phone so you can see it while reviewing; the image itself isn't copied or sent.

Imported files

CSVs from the WLLT-e web app, other money apps or your bank, and bank statement PDFs, are read on the phone and uploaded nowhere. PDF pages are read with the same ML Kit text recognition as receipts. From a web app backup, settings, API keys and passwords are not read at all. A PDF password you type is used once to open that file and isn't kept.

Budgeting as a couple

If you budget as a couple, the accounts and goals you choose to share, the transactions in those accounts, your category budgets and the categories you've made are sent straight to your partner's phone over Wi-Fi Direct, with no router, internet or server. Anything not shared is never sent.

The first time you connect, the two phones exchange keys and show six digits for you both to match. After that, every sync is encrypted (AES-256-GCM) with a key only those two phones hold. Disconnecting in Account stops syncing; data already shared stays on both phones as each person's own.

Voice

What you say is recognised by your phone's built-in speech recogniser, usually Google's. Depending on the phone and the language, this may be processed on its provider's servers. WLLT-e only receives the resulting text and reads it on the phone.

Third-party components

ML Kit text recognition runs on the phone through Google Play services. Google may receive technical data about how that component is used and performs, but not the images or text it reads. Because of this component the app holds the internet permission; WLLT-e itself doesn't use it to send your data.

Buying PRO

PRO is bought through Google Play. Payment and card details are handled by Google under its privacy policy; WLLT-e only receives the purchase status so PRO can unlock on your phone.

Permissions asked for

• Notification access: to log automatically from banks and e-wallets.
• Photos and media: to read new screenshots, when From screenshots is turned on.
• Microphone: to log by voice.
• Notifications: for bill reminders and what's found in screenshots.
• Running in the background: to check for new screenshots and send reminders on time.
• Biometrics: for the app lock, using your phone's own fingerprint, face or screen lock. WLLT-e keeps no PIN or biometric data.
• Nearby devices and Wi-Fi state (Android 13 and up): only to find and connect to your partner's phone over Wi-Fi Direct. This permission is declared as not used for location.
• Location (Android 12 and below): Android requires it to look for Wi-Fi Direct devices. WLLT-e doesn't read or keep your location.

Backups and sharing

CSV backups are written to a folder you choose. If that folder syncs to a cloud service, the copy is kept there too, under that service's policy. Reports you share are made on the phone, and you choose where they go.

Deleting your data

Start over in Account deletes everything. Uninstalling the app deletes its database too. Turn off CSV backup if you don't want new copies in your chosen folder.

This website

wllte.app uses no cookies, analytics or trackers, and its fonts are served from this site. The hosting provider may log technical data such as IP addresses to serve pages and fend off attacks.

The feedback form on the home page sends the kind of message, what you wrote, your email or name if you give one, and the page's language to a Google Sheet owned by RSQUARE through Google Apps Script. It's used only to read and answer your message, and can be deleted whenever you ask at [email protected]. The form doesn't send your browser type, IP address or anything else.

Changes and contact

WLLT-e is developed by RSQUARE. This policy may be updated as features are added. The latest version is always in the app and at wllte.app. Questions about privacy can be sent to [email protected].